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WHAT IS CLAIMED IS: 

1 . A method for analyzing the root cause of system failures on one or 
more computers, comprising: 

generating an event when a computer system detects a system 

failure; 

determining the cause of the system failure; 

transmitting the event, including the determined cause, from the 
computer system to a central repository; and 

analyzing the system failure event in the central repository. 

2. The method of claim 1, further comprising: 

re-transmitting the event if a receipt confirmation message is not 

received from the central repository. 

3. The method of claim 1, further comprising: 

storing the event in a local repository located on the computer 

system. 

4. The method of claim 1, further comprising: 

holding the event in a queue if a receipt confirmation message is 

not received from the central repository; and 

re-transmitting the events in the queue after a period of time. 

5. The method of claim 1 , further comprising: 

determining if the system failure was due to a hardware problem by 

analyzing a file log. 

6. The method of claim 1, further comprising: 
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determining if the system failure was due to a software problem by 
analyzing system core files. 

7. The method of claim 2, further comprising: 
assigning a sequence number to each event generated; 

receiving a status request from the central repository; and 

synchronizing the local repository and the central repository if the 

sequence number does not match the expected sequence number. 

8. The method of claim 6, wherein the synchronizing step further 
comprises: 

transmitting missing events in the central repository from the 
computer system. 

9. The method of claim 8, wherein the synchronizing step further 
comprises: 

transmitting missing events in the local repository from the central 
repository. 

10. The method of claim 6, wherein the synchronizing step further 
comprises: 

discarding events that have already been received. 

1 1 . The method of claim 1 , further comprising, 

retransmitting the information stored in the central repository to 

another computer system for further analysis. 

12. An apparatus for analyzing the root cause of system failures on one 
or more computers, comprising: 

a network; 

a local support computer coupled to said network; and 
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a computer system coupled to the network, said computer system 
programmed to monitor itself and another computer system for system 
failures, to determine the cause of the system failure, and to transmit 
system failure events to said local support computer. 

13. An apparatus of claim 12, further comprising: 

the local support computer programmed to collect and analyze the 

system failure information. 

14. An apparatus of claim 12, further comprising: 

the computer system programmed to re-transmit the event if a 

receipt confirmation message is not received from the local support 
computer. 

15. An apparatus of claim 12, further comprising: 

the computer system programmed to store the event in a local 

repository located on the computer system. 

1 6. An apparatus of claim 1 2, further comprising: 

the computer system programmed to hold the event in a queue if a 

receipt confirmation message is not received from the central repository, 

and to re-transmit the events in the queue after a period of time. 

17. An apparatus of claim 12, further comprising: 

the computer system programmed to determine if the system 

failure was due to a hardware problem by analyzing a file log. 

18. An apparatus of claim 12, further comprising: 

the computer system programmed to determine if the system 

failure was due to a software problem by analyzing system core files. 
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19. An apparatus of claim 14, further comprising: 

the computer system programmed to assign a sequence number to 

each event generated; 

the local support computer programmed to send a status request to 
the computer system, and to synchronize the local repository with the 
local support computer if the sequence number does not match the 
expected sequence number. 

20. An apparatus of claim 12, further comprising: 

a remote support computer connectable to the local support 

computer for receiving system failure data from said local support 
computer. 

21 . A means for analyzing the root cause of system failures on one or 
more computers, comprising: 

a means for transmitting data from one computer to another, 
a local support computer coupled to said means for transmitting 

data, 

a computer system coupled to said means for transmitting data, 
a means for said computer system to monitor itself or another 

computer system for system failures and determining the causes of said 

failures, 

a means for transmitting the causes of said failures to the local 
support computer, 

22. A means for analyzing the root cause of system failures on one or 
more computers, of claim 21, further comprising: 

a remote support computer, 
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a means for transmitting system failure information from the local support 
computer to the remote support computer. 
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